When you are trying to establish a remote desktop connection to a target system using windows server 2012 or above, you might have gotten the error message “Account Restrictions Are Preventing This User from Signing In”. Disabling the windows group policy would solve the problem & even a few other methods.
Account Restrictions Are Preventing This User from Signing In – How Is It?
Let’s take a deeper look into what causes the account restrictions problems & what steps need to be taken in order to solve the problem.
What Causes the Error Message
Before going any further with how to solve the error message, let’s first see what causes the errors.
Windows Group Policy
There are some windows policies that are the reason your system takes the necessary actions. Windows group policy stops the remote desktop client to expose sign-in credentials to the remote host. Disabling this policy will fix the issue in no time.
Sometimes the reason that the error message might show is that the account you are trying to remote access doesn’t have a password. Disabling the policy or just setting up a password will do the trick.
Disabling the Windows Group Policy
You need to know first that this solution can be done on any windows except Windows 10 Home. At first, you need to go open up the start menu & type up “local group policy”. It would give you “Edit Group Policy”. Left-click it.
Now you have landed on the Local Group Policy Editor. You will find two configurations on the left like the figure. One is Computer configurations & another one is User configurations with the same folders.
We will be going into computer configurations & expanding the Administrative Templates section. Now you will find the system folder & expand that. You will find credentials delegation in the first few options. Click on it.
Computer Configuration > Administrative Templates > System > Credentials Delegation.
Now you can see on your right at the bottom saying “Restrick delegation of credentials to remote servers”. Double click on that & you will find it enabled. Disable the option & click apply. This should resolve the issue.
Setting up a Password
We have already discussed that this could also be a problem. To set up a password we go into the same “Local Group Policy Editor”. Now we will be going into the windows settings under computer configurations. You will find the security settings there. Expand it.
Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options
There you would find the Local Policies, After expanding that one, you will find the security options. Clicking on it would enable you to find “Accounts: Limit local account use of blank passwords to console logon only” on the right of your screen.
Double click on that policy & disable it. Applying this setting & restarting the computer would hopefully fix the problem.
How to access the Local Group Policy directory?
If you can’t find the local group policy directory from searching through your start menu, then you can press windows key + R to open the dialog box. Type in ‘‘gpedit.msc” in the search box & hit enter. This should open the local group policy editor.
Due to some windows policies, these options are enabled. But following the solutions step by step should allow you to disable them & get rid of the error message that keeps coming up.